Check SHA1 hash for jar as well as buildfile

[weavejester]

In hop.core/bin/hop, Hop takes a SHA1 of the current buildfile in order to find the cached shell script to run. Since the shell script also depends on the Hop jar being run, the SHA1 should be taken from both. In theory we should just be able to cat them together and pipe the result to shasum.